CVS commit: pkgsrc/graphics/libjpeg-turbo

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Jan 24 21:59:48 UTC 2024

Modified Files:
        pkgsrc/graphics/libjpeg-turbo: Makefile distinfo

Log Message:
libjpeg-turbo: updated to 3.0.2

3.0.2
=====

Significant changes relative to 3.0.1:

1. Fixed a signed integer overflow in the `tj3CompressFromYUV8()`,
`tj3DecodeYUV8()`, `tj3DecompressToYUV8()`, and `tj3EncodeYUV8()` functions,
detected by the Clang and GCC undefined behavior sanitizers, that could be
triggered by setting the `align` parameter to an unreasonably large value.
This issue did not pose a security threat, but removing the warning made it
easier to detect actual security issues, should they arise in the future.

2. Introduced a new parameter (`TJPARAM_MAXMEMORY` in the TurboJPEG C API and
`TJ.PARAM_MAXMEMORY` in the TurboJPEG Java API) and a corresponding TJBench
option (`-maxmemory`) for specifying the maximum amount of memory (in
megabytes) that will be allocated for intermediate buffers, which are used with
progressive JPEG compression and decompression, optimized baseline entropy
coding, lossless JPEG compression, and lossless transformation.  The new
parameter and option serve the same purpose as the `max_memory_to_use` field in
the `jpeg_memory_mgr` struct in the libjpeg API, the `JPEGMEM` environment
variable, and the cjpeg/djpeg/jpegtran `-maxmemory` option.

3. Introduced a new parameter (`TJPARAM_MAXPIXELS` in the TurboJPEG C API and
`TJ.PARAM_MAXPIXELS` in the TurboJPEG Java API) and a corresponding TJBench
option (`-maxpixels`) for specifying the maximum number of pixels that the
decompression, lossless transformation, and packed-pixel image loading
functions/methods will process.

4. Fixed an error ("Unsupported color conversion request") that occurred when
attempting to decompress a 3-component lossless JPEG image without an Adobe
APP14 marker.  The decompressor now assumes that a 3-component lossless JPEG
image without an Adobe APP14 marker uses the RGB colorspace if its component
IDs are 1, 2, and 3.


To generate a diff of this commit:
cvs rdiff -u -r1.33 -r1.34 pkgsrc/graphics/libjpeg-turbo/Makefile
cvs rdiff -u -r1.27 -r1.28 pkgsrc/graphics/libjpeg-turbo/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/libjpeg-turbo/Makefile
diff -u pkgsrc/graphics/libjpeg-turbo/Makefile:1.33 pkgsrc/graphics/libjpeg-turbo/Makefile:1.34
--- pkgsrc/graphics/libjpeg-turbo/Makefile:1.33 Wed Oct 18 17:21:00 2023
+++ pkgsrc/graphics/libjpeg-turbo/Makefile      Wed Jan 24 21:59:48 2024
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.33 2023/10/18 17:21:00 adam Exp $
+# $NetBSD: Makefile,v 1.34 2024/01/24 21:59:48 adam Exp $
 
-DISTNAME=      libjpeg-turbo-3.0.1
+DISTNAME=      libjpeg-turbo-3.0.2
 CATEGORIES=    graphics
-MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE:=libjpeg-turbo/}
+MASTER_SITES=  ${MASTER_SITE_GITHUB:=libjpeg-turbo/}
 
 MAINTAINER=    dsainty%NetBSD.org@localhost
 HOMEPAGE=      https://libjpeg-turbo.org/

Index: pkgsrc/graphics/libjpeg-turbo/distinfo
diff -u pkgsrc/graphics/libjpeg-turbo/distinfo:1.27 pkgsrc/graphics/libjpeg-turbo/distinfo:1.28
--- pkgsrc/graphics/libjpeg-turbo/distinfo:1.27 Wed Oct 18 17:21:00 2023
+++ pkgsrc/graphics/libjpeg-turbo/distinfo      Wed Jan 24 21:59:48 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.27 2023/10/18 17:21:00 adam Exp $
+$NetBSD: distinfo,v 1.28 2024/01/24 21:59:48 adam Exp $
 
-BLAKE2s (libjpeg-turbo-3.0.1.tar.gz) = 60384ff5315c8044c1e3c9fed1a54f5c65bf3f04c2038ec3fb025f3530a02fb7
-SHA512 (libjpeg-turbo-3.0.1.tar.gz) = 26a2c821a023579e82a7c2a00582747f5f24089aa0820ba304f1ff71c6894b7a6bd0468acc5ff90e2655e0a1c23a5a35a779df51f5cfa3e9eba527c709fab55b
-Size (libjpeg-turbo-3.0.1.tar.gz) = 2800900 bytes
+BLAKE2s (libjpeg-turbo-3.0.2.tar.gz) = da7e36c1622366486a4e6ffd782b3195b68bdf6a9bb686a999c0d7f657ca3ebf
+SHA512 (libjpeg-turbo-3.0.2.tar.gz) = 9dddc039d9fd43fe2e2ff6a8b14fab4344f778ff270ec6f38f6496846501701df10b5127e2fe8b778cc236cac38b73889b9cc5bf884f8a43c37c4736097abb25
+Size (libjpeg-turbo-3.0.2.tar.gz) = 2831164 bytes
 SHA1 (patch-jpeglib.h) = 22f69b5fed1882c33f4a8a6e42b8aca5ed195de3
 SHA1 (patch-simd_arm__aarch32_jsimd.c) = 0d35d6f0727709d4e894202a3a297fc66383c377
 SHA1 (patch-simd_arm__aarch64_jsimd.c) = 76c5e81403f70a8ea8bca8ae2266066fff5ec6f9